Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa
File: 8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa (raw, json)
Hash identifier: 3BJWqFBcET/L6WbX1heubYVhU9d8ZcacT1n5kV86u4k=
Subject key identifier: 50:02:06:1E:A6:24:9F:38:5F:A8:A9:B1:2F:FC:BB:14:6E:D2:36:8E
Certificate issuer: /CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
Certificate serial: 16AC0A
Authority key identifier: 4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa
Signing time: Mon 10 Jul 2023 15:05:40 +0000
ROA not before: Sun 09 Jul 2023 15:05:39 +0000
ROA not after: Thu 10 Jul 2025 15:05:39 +0000
asID: 271821
IP address blocks: 192.100.198.0/24 maxlen: 24
2801:10:6800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485834 (0x16ac0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
Validity
Not Before: Jul 9 15:05:39 2023 GMT
Not After : Jul 10 15:05:39 2025 GMT
Subject: CN=8ea89d98e2528e3dd8ce6927d392c5b4525ead10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:1b:c7:65:91:a9:47:d1:1c:e0:2c:1a:19:
59:b1:bc:42:8a:eb:b9:57:76:7e:c1:12:29:67:9c:
f2:74:b8:6d:df:b8:0b:c2:a4:ae:29:f3:93:28:a3:
07:b5:1d:cc:cd:11:18:3c:c9:7f:6c:ae:b2:21:af:
89:7c:a4:24:25:35:e8:05:87:b3:e7:04:e4:3a:6b:
3c:93:7c:27:50:ea:aa:0e:98:85:f6:3c:b1:0f:22:
b6:33:cc:48:c7:52:f5:00:a1:a8:c8:ad:2d:46:41:
ed:0d:7f:6b:8e:9f:34:00:f6:5d:62:34:94:51:83:
68:3d:f3:18:40:07:c5:4f:48:ed:50:55:6e:9d:19:
2d:27:89:5d:b4:64:7d:65:ea:f9:59:95:62:22:cb:
f4:37:24:a1:7a:02:32:56:c6:bb:73:a2:2f:fb:93:
6f:ed:10:31:76:58:56:a6:5b:09:0e:fc:6e:1b:47:
f0:88:73:95:7a:db:98:fb:4a:97:dc:89:6c:fb:b0:
d3:35:ab:c1:89:9e:ba:62:c5:d7:31:0f:77:1f:f4:
c8:e5:ee:3c:dd:8d:22:2d:4c:62:76:96:a5:a6:c0:
7b:33:58:b0:75:e7:8b:27:92:65:71:42:83:8f:0c:
c1:2c:33:2e:23:04:b4:bb:b3:ee:20:77:b9:c2:7a:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:06:1E:A6:24:9F:38:5F:A8:A9:B1:2F:FC:BB:14:6E:D2:36:8E
X509v3 Authority Key Identifier:
keyid:4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/ebe91dc23a981293baadb7c6ae73c111d36d98be.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.198.0/24
IPv6:
2801:10:6800::/48
Signature Algorithm: sha256WithRSAEncryption
2b:d3:31:5d:ec:5f:5f:1e:14:0e:03:81:07:cd:23:cb:e6:92:
2b:de:6b:af:44:46:eb:f7:55:5a:1c:43:2a:a4:f4:ca:4a:ce:
5a:7a:d1:07:28:c2:87:97:8f:d2:61:88:64:aa:6e:f5:9d:eb:
50:d0:c2:28:9c:61:61:db:02:61:19:db:82:a7:b0:26:61:b5:
44:a7:d6:53:e7:66:c6:34:4f:cf:26:54:e0:42:3b:a8:6c:46:
0f:2a:72:6a:a3:75:7f:94:50:e4:d6:3a:93:ad:f6:c6:dd:24:
19:44:e4:75:4e:eb:13:85:df:d0:3a:39:68:43:58:93:1e:e7:
45:12:fa:04:3a:81:33:3d:d4:b7:8b:a3:98:af:18:ca:fa:a8:
50:ba:7a:32:f5:c8:33:45:c8:d1:d5:80:f3:d4:0a:fa:d1:72:
f0:98:ad:39:9c:9d:0f:e8:34:0e:a4:18:32:80:54:d5:0a:c0:
d2:66:62:6a:2b:03:a4:f0:fa:3b:f4:97:1e:30:0c:90:a1:9f:
13:d8:67:5f:4d:92:b6:58:9a:30:63:28:a2:de:ce:d2:d1:d4:
d5:e7:2f:f5:28:aa:63:d3:bf:6d:ae:5f:46:be:f6:f7:0c:19:
a4:7a:02:fb:bf:04:8e:46:9f:e7:88:8b:77:fd:b4:72:54:02:
cf:76:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org